VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20260217

[Page version: 20260319 20:29:26]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.265.27sha512
6.266.266.27shake128
7.717.717.72sha256
14.6014.6114.62asconxofav12
14.6114.6114.63asconhashav12
14.9414.9514.97T:xoodyakv1
21.8621.8721.88asconhashv12
21.8621.8721.89asconxofv12
27.2527.2727.96asconhashabi32v12
34.8834.9034.93T:esch256v2
40.5440.8241.14asconhashbi32v12
42.6242.7342.77T:romulush
44.6644.7245.24T:esch384v2
220.48220.64220.89T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.475.485.49sha512
6.436.436.45shake128
8.248.268.27sha256
14.7614.7814.79asconhashav12
14.7714.7814.80asconxofav12
15.0315.0415.06T:xoodyakv1
22.0522.0722.09asconxofv12
22.0622.0822.09asconhashv12
27.6428.1428.22asconhashabi32v12
35.1635.2035.24T:esch256v2
40.9041.0241.62asconhashbi32v12
43.0143.0943.13T:romulush
45.1645.1845.59T:esch384v2
219.81220.13220.26T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.815.825.83sha512
6.916.926.94shake128
9.119.149.17sha256
15.0015.0315.05asconhashav12
15.0115.0315.05asconxofav12
15.1515.1815.20T:xoodyakv1
22.3722.4022.44asconhashv12
22.3722.4022.44asconxofv12
28.1228.5528.70asconhashabi32v12
35.5735.6635.75T:esch256v2
41.3941.5442.01asconhashbi32v12
43.5943.6743.77T:romulush
45.9445.9846.36T:esch384v2
219.50219.57219.66T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.416.436.44sha512
7.547.557.59shake128
11.6511.6911.75sha256
15.5015.5615.61T:xoodyakv1
15.6515.6915.74asconhashav12
15.6615.7015.75asconxofav12
23.1823.2323.29asconxofv12
23.2223.2623.32asconhashv12
29.4529.9229.99asconhashabi32v12
36.7536.8937.03T:esch256v2
43.1743.3643.87asconhashbi32v12
45.2245.2845.38T:romulush
47.9448.0148.42T:esch384v2
217.79217.92218.04T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
15.0815.1615.29sha512
18.4618.5818.85shake128
20.1920.3120.57T:xoodyakv1
23.6423.9124.49asconhashav12
24.0424.3324.66asconxofav12
33.5033.8434.39asconxofv12
33.4533.8934.30asconhashv12
43.5943.8144.10asconhashabi32v12
43.6143.8144.20sha256
49.7550.2550.95T:esch256v2
61.9662.3662.93asconhashbi32v12
66.0466.3066.52T:romulush
73.2973.5773.99T:esch384v2
193.67193.99194.42T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.7473.5774.31T:xoodyakv1
89.5491.8494.75asconhashav12
90.46?93.45?138.96?asconxofav12
101.97?103.91?157.77?sha512
117.43118.01120.53asconhashv12
117.19118.60121.54asconxofv12
145.94146.79148.71shake128
157.27158.29159.34asconhashabi32v12
184.69186.97190.99T:esch256v2
186.34187.26188.74T:romulush
210.83212.90215.69asconhashbi32v12
224.10224.79226.14T:photonbeetlehash256rate32v1
279.51281.18283.07sha256
320.28321.81323.42T:esch384v2